Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11572.roa
File:                     AS11572.roa (raw, json)
Hash identifier:          L80tv4XWpxF/fe+6q50WVldpejpPKC/B6uEqEqWjpPY=
Subject key identifier:   FA:FA:C9:EF:D8:0D:42:A1:55:84:37:CF:51:DE:09:DB:BC:26:36:C3
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1C972CE6A848C428D4CA96396DDB2825EB97B6DF
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11572.roa
Signing time:             Tue 27 Sep 2022 14:38:30 +0000
ROA not before:           Tue 27 Sep 2022 14:33:30 +0000
ROA not after:            Tue 26 Sep 2023 14:38:30 +0000
asID:                     11572
IP address blocks:        206.206.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:97:2c:e6:a8:48:c4:28:d4:ca:96:39:6d:db:28:25:eb:97:b6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep 27 14:33:30 2022 GMT
            Not After : Sep 26 14:38:30 2023 GMT
        Subject: CN=FAFAC9EFD80D42A1558437CF51DE09DBBC2636C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:aa:e0:92:8c:64:0e:8f:7f:1a:02:e5:fe:04:
                    f7:ac:f2:12:3a:bb:55:4e:7b:73:d7:ce:9e:e4:23:
                    22:a7:86:fa:53:bc:ca:2b:92:53:ac:11:14:89:92:
                    bf:6e:2a:e3:57:6d:6e:17:bb:bc:3e:da:05:16:75:
                    82:97:80:a9:6f:6e:d6:b5:14:bf:c1:89:a0:d7:17:
                    c1:f3:12:00:9d:55:66:00:18:77:f8:a1:4a:8a:cf:
                    bf:53:cd:89:a5:3f:9d:6f:aa:5a:11:97:e5:9e:36:
                    11:ef:04:f4:a8:e8:14:54:4c:71:15:c1:ae:35:ca:
                    29:68:79:42:4b:71:cb:6b:c7:31:8c:c4:4f:f4:33:
                    be:3c:38:63:2d:a5:0a:7f:6a:04:85:b0:bd:7b:da:
                    db:08:55:8f:0f:82:d0:27:ef:1a:1c:2e:1d:e5:e1:
                    a7:25:41:84:9b:7d:04:a8:d3:eb:3d:fd:75:af:bc:
                    d2:fe:80:bc:97:49:2b:c2:3c:95:85:43:52:62:e2:
                    3e:8c:dc:ed:4f:68:a3:9c:c8:dc:17:8c:26:a9:d6:
                    12:6b:1e:bc:45:0a:41:6a:20:70:fe:03:9d:48:00:
                    ed:0f:0c:b4:b1:bc:e5:a8:bb:11:19:34:8c:5b:a5:
                    15:cf:fd:46:e1:9a:6c:ff:04:27:eb:7b:27:6c:eb:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FA:C9:EF:D8:0D:42:A1:55:84:37:CF:51:DE:09:DB:BC:26:36:C3
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11572.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:4c:d4:47:8c:59:15:89:fd:9c:3d:89:e4:bc:57:d3:6f:77:
         6c:d0:48:d2:16:d3:21:69:6f:bf:b0:a3:29:9b:bd:17:b9:ed:
         91:2b:7a:75:16:dc:1b:86:5f:a9:93:ba:51:c1:b7:1d:26:11:
         f0:8f:83:da:cf:26:82:e4:27:08:0b:3d:10:34:8e:bd:21:86:
         cb:5d:b3:85:59:60:e5:4c:25:00:13:c5:98:ae:96:b3:cd:6c:
         e3:13:06:ed:46:33:06:bf:99:49:8c:39:0a:b9:52:34:c9:c6:
         b6:63:f6:6b:1b:83:29:c7:4d:e9:dc:61:8a:e4:47:74:3c:85:
         53:51:d5:30:f6:2b:a4:28:ee:60:08:65:d2:48:e4:99:3b:5c:
         1f:19:f8:82:fe:4d:49:7b:20:3e:af:9e:85:36:17:62:20:98:
         7a:97:5a:09:9b:fc:f1:4c:6b:8c:24:98:7a:43:8f:c9:4c:b4:
         cf:af:50:d8:d4:40:64:e9:37:62:4a:2c:f9:09:96:0b:d2:eb:
         c9:55:12:41:90:85:97:93:5f:83:b3:d6:e0:29:bf:39:15:d7:
         1d:14:c9:3b:a7:03:6b:a6:e5:fa:19:dc:97:fe:3d:2a:01:4e:
         91:25:b4:41:b7:45:7a:2b:64:59:7a:31:73:b3:bd:bb:11:f9:
         1a:97:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----